From 8615695162fa67b02cbbc2acf46baefb752813ac Mon Sep 17 00:00:00 2001
From: Thomas Lange <code@nerdmind.de>
Date: Mon, 10 Apr 2017 22:47:54 +0200
Subject: Javascript for confirmation message on delete buttons was moved to
 the main.js file to prevent trouble with an active Content-Security-Policy in
 a case where "unsafe-inline" for Javascript is not allowed.

---
 template/admin/html/page/form.php |  2 +-
 template/admin/html/post/form.php |  2 +-
 template/admin/html/user/form.php |  2 +-
 template/admin/rsrc/main.js       | 11 +++++++++++
 4 files changed, 14 insertions(+), 3 deletions(-)

(limited to 'template/admin')

diff --git a/template/admin/html/page/form.php b/template/admin/html/page/form.php
index 99b3e00..9b8a39e 100644
--- a/template/admin/html/page/form.php
+++ b/template/admin/html/page/form.php
@@ -85,7 +85,7 @@
 		<?php elseif($FORM['TYPE'] === 'UPDATE'): ?>
 			<input type="submit" name="update" value="<?=$Language->text('update')?>" />
 		<?php elseif($FORM['TYPE'] === 'DELETE'): ?>
-			<input type="submit" name="delete" value="<?=$Language->text('delete')?>" onclick="return confirm('<?=$Language->template('sure')?>')" />
+			<input type="submit" name="delete" value="<?=$Language->text('delete')?>" id="delete-button" data-text="<?=$Language->template('sure')?>" />
 		<?php endif; ?>
 	</section>
 </form>
\ No newline at end of file
diff --git a/template/admin/html/post/form.php b/template/admin/html/post/form.php
index cba4aa8..66db820 100644
--- a/template/admin/html/post/form.php
+++ b/template/admin/html/post/form.php
@@ -85,7 +85,7 @@
 		<?php elseif($FORM['TYPE'] === 'UPDATE'): ?>
 			<input type="submit" name="update" value="<?=$Language->text('update')?>" />
 		<?php elseif($FORM['TYPE'] === 'DELETE'): ?>
-			<input type="submit" name="delete" value="<?=$Language->text('delete')?>" onclick="return confirm('<?=$Language->template('sure')?>')" />
+			<input type="submit" name="delete" value="<?=$Language->text('delete')?>" id="delete-button" data-text="<?=$Language->template('sure')?>" />
 		<?php endif; ?>
 	</section>
 </form>
\ No newline at end of file
diff --git a/template/admin/html/user/form.php b/template/admin/html/user/form.php
index 333b46d..845c55c 100644
--- a/template/admin/html/user/form.php
+++ b/template/admin/html/user/form.php
@@ -91,7 +91,7 @@
 		<?php elseif($FORM['TYPE'] === 'UPDATE'): ?>
 			<input type="submit" name="update" value="<?=$Language->text('update')?>" />
 		<?php elseif($FORM['TYPE'] === 'DELETE'): ?>
-			<input type="submit" name="delete" value="<?=$Language->text('delete')?>" onclick="return confirm('<?=$Language->template('sure')?>')" />
+			<input type="submit" name="delete" value="<?=$Language->text('delete')?>" id="delete-button" data-text="<?=$Language->template('sure')?>" />
 		<?php endif; ?>
 	</section>
 </form>
\ No newline at end of file
diff --git a/template/admin/rsrc/main.js b/template/admin/rsrc/main.js
index 3d5546f..679a3fc 100644
--- a/template/admin/rsrc/main.js
+++ b/template/admin/rsrc/main.js
@@ -91,4 +91,15 @@ addEventListener("DOMContentLoaded", function() {
 			}
 		}, false);
 	}
+}, false);
+
+//==============================================================================
+// Confirmation message for delete buttons
+//==============================================================================
+addEventListener("DOMContentLoaded", function() {
+	if(document.getElementById("delete-button")) {
+		document.getElementById("delete-button").onclick = function(e) {
+			return confirm(e.target.getAttribute('data-text'));
+		};
+	}
 }, false);
\ No newline at end of file
-- 
cgit v1.2.3